Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft
File:                     sMIK4drMoxgVsnRwKSfBpanbx7M.mft (raw, json)
Hash identifier:          6De70DWXB4Cj9dmNWfy8RM3h27fdvBz1tAhEtPi7PNk=
Subject key identifier:   C3:A9:3C:7B:0F:9A:51:91:31:7D:4A:0A:B3:80:36:81:43:09:FE:39
Authority key identifier: B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3
Certificate issuer:       /CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3
Certificate serial:       0199FE46C2A518ACA59B8E9802EC6D2A35CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft
Manifest number:          16F6
Signing time:             Sun 19 Oct 2025 21:01:14 +0000
Manifest this update:     Sun 19 Oct 2025 21:01:14 +0000
Manifest next update:     Mon 20 Oct 2025 21:01:14 +0000
Files and hashes:         1: BO-bzW2V5HfZnpDWCOZRREj0_aA.roa (hash: bBvM5GD33JW26g6UBHC38zwmrN/wxvFNIrA/ZVP1z3g=)
                          2: D2VP3boIbKOt_7fZmoGwBMd0j_E.roa (hash: 5B9i3Ekd388l3dq3yF+uoTeTOTbzf9g6nU3q4mHoYKI=)
                          3: KDntMwv7lfN57GwH3c-ooOZ7MV8.roa (hash: N8ZIBiU8gH7tSdeMv2oT8+5VHr8ZvOaPGXUGzn1qd6o=)
                          4: MKXE3l_kRrUK-SEa0SjlnZgrzOY.roa (hash: qB75ATBjq0bvGr3VuX9ZJkiNF1i/cky+GUiK1V7um9s=)
                          5: OMLGm3M8AukdVmECZgGAm5oBI6w.roa (hash: NhtCtzcMBYjPL2amj6HhHMrktNr+dPVzL27OzOSW9VY=)
                          6: QhEieVCa4VzXwRS2R-uT3VD69zA.roa (hash: g7EksG6Y5xUVpGTxJtSk1SiYEQY9x4uAiGIMcbCmQ/k=)
                          7: T_vGm-YR8rSAG_LKyG-LL0j3jZY.roa (hash: ctLCD3mPPm9ORV/MIVYXQC7GReMvIOdcov6IyRw8Un0=)
                          8: VT5Wd_pqOJ9dH5ke9coXfMElArk.roa (hash: fLcCO/2FWRaPE55k8VUjCjI94f4/oSwtLUtlY9+MVT8=)
                          9: ZwvgwSFitJnn0NI2TLMjAG1OYEI.roa (hash: 3EAQTTBdwC0en0ttbPcWmRtInqoUrBVPVbUH2J6E2Tg=)
                          10: i2Cr6PSWUcoNruWdbdR97Em0Dh4.roa (hash: kTy26coV3ftFQPHtpIaAlqr+Ns/2fmpdvjWPntGul4A=)
                          11: sMIK4drMoxgVsnRwKSfBpanbx7M.crl (hash: /wgVGud6YjRd4K5ZNemOKk9OL03ElOHH1QhY1dK3/Og=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:46:c2:a5:18:ac:a5:9b:8e:98:02:ec:6d:2a:35:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3
        Validity
            Not Before: Oct 19 21:01:14 2025 GMT
            Not After : Oct 20 21:01:14 2025 GMT
        Subject: CN=c3a93c7b0f9a5191317d4a0ab38036814309fe39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:08:98:6e:59:1c:3b:db:9a:7a:e8:2a:fd:96:
                    46:0e:8d:db:a1:44:f2:f0:c6:61:42:93:d5:9a:30:
                    f8:ce:83:77:78:21:90:77:59:9c:9f:6f:7c:9c:ac:
                    ac:96:82:e3:ac:1c:c8:c8:83:c6:e5:8d:a9:5e:46:
                    de:93:38:a4:f1:fb:2a:0a:ef:9b:07:81:09:bc:0b:
                    09:ea:8a:b1:fd:b7:bc:cc:04:8d:9d:61:d2:1c:80:
                    ce:be:b2:32:03:f5:1c:07:9a:d1:b0:3d:ce:50:58:
                    63:66:5d:8b:e0:18:4e:e5:f1:57:37:eb:74:fa:04:
                    85:30:2a:0a:0d:7e:47:76:0a:15:c9:9d:8d:bb:29:
                    79:cb:00:52:9b:f2:1c:47:a5:06:d4:a5:d0:16:72:
                    a5:7d:b2:1e:d2:84:50:69:e2:86:b2:7b:02:64:a9:
                    63:45:bb:35:b8:8d:ee:0f:3c:62:fc:bf:04:ec:54:
                    b6:a3:57:38:39:99:a2:1a:8c:d4:87:f8:ad:5f:3e:
                    45:59:33:6f:48:89:eb:ad:de:40:b5:0d:91:c4:31:
                    a8:38:1d:cb:6d:0b:e9:9b:7f:03:46:c3:3f:93:bc:
                    46:84:59:da:ae:68:0a:16:35:fe:60:8c:3a:41:52:
                    9b:0d:03:f3:aa:a8:51:bf:d1:cd:fe:e4:19:21:40:
                    20:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:A9:3C:7B:0F:9A:51:91:31:7D:4A:0A:B3:80:36:81:43:09:FE:39
            X509v3 Authority Key Identifier:
                keyid:B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:7b:fd:d7:d6:a6:40:3a:53:e1:94:90:ab:bd:2d:f2:b6:bd:
         d3:97:dc:61:30:83:4f:58:bf:7a:30:58:10:4f:ae:b9:29:8b:
         d7:eb:3e:cc:ad:26:df:4e:e7:a2:de:2d:7e:2d:71:7f:e7:41:
         bc:83:b1:f0:0e:06:9a:c8:27:05:76:80:66:f6:c8:ed:ba:4e:
         f2:c1:60:35:b1:e6:ac:2c:84:12:3c:b7:6a:ec:00:51:01:ae:
         8b:6b:7c:d6:81:66:fe:08:d2:3a:2e:a2:81:93:92:a2:59:b7:
         30:09:7d:d3:20:5c:b7:c8:95:a1:ff:ed:44:72:4e:c2:11:2c:
         40:9a:ce:41:05:c1:cb:e8:da:66:c0:3c:66:b2:9c:fb:e3:c0:
         a7:57:9a:87:53:24:e4:ec:e5:e4:78:63:fa:0c:29:eb:2e:af:
         28:ff:5d:04:46:30:4e:80:1e:3a:97:1e:a5:8d:1b:53:07:d3:
         f6:2d:7d:08:88:04:5d:20:2d:93:40:9d:01:70:af:aa:38:e5:
         c8:a7:98:9b:85:fe:06:d1:fa:3c:e8:01:50:a1:dc:c4:98:71:
         c3:da:44:04:86:f2:ba:e1:02:3c:92:fb:37:cc:a8:86:d3:38:
         cc:ee:17:72:d0:18:21:d4:89:1a:75:1c:2f:bf:56:88:55:97:
         cb:93:a3:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:30:27 2025 by rpki-client